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Abstract —In this paper, we address robust static anti-windup 
compensator design and performance analysis for saturated 
linear closed loops in the presence of nonlinear probabilistic pa¬ 
rameter uncertainties via randomized techniques. The proposed 
static antl-wlndup analysis and robust performance synthesis cor¬ 
respond to several optimization goals, ranging from minimization 
of the nonlinear input/output gain to maximization of the stability 
region or maximization of the domain of attraction. We also 
introduce a novel paradigm accounting for uncertainties in the 
energy of the disturbance Inputs. 

Due to the special structure of linear static anti-windup design, 
wherein the design variables are decoupled from the Lyapunov 
certificates, we introduce a significant extension, called scenario 
with certificates (SwC), of the so-called scenario approach for 
uncertain optimization problems. This extension is of inde¬ 
pendent interest for similar robust synthesis problems involv¬ 
ing parameter-dependent Lyapunov functions. We demonstrate 
that the scenario with certificates robust design formulation is 
appealing because it provides a way to implicitly design the 
parameter-dependent Lyapunov functions and to remove restric¬ 
tive assumptions about convexity with respect to the uncertain 
parameters. Subsequently, to reduce the computational cost, we 
present a sequential randomized algorithm for iteratively solving 
this problem. The obtained results are Illustrated by numerical 
examples. 

Index Terms —robust control, anti-windup augmentation, un¬ 
certainty, randomized methods. 

I. Introduction 

A NTI-WINDUP designs correspond to control systems 
augmentations in light of actuator saturations, to mitigate 
the negative effects of the input nonlinearity. Their develop¬ 
ment has a history dating back to the era of analog controllers, 
more than half a century ago, and the most effective techniques 
are well illustrated in 1331, Ell, m, QS). When robustness 
to parameter uncertainties must be taken into account, only 
recent results on suitable anti-windup constructions become 
available, all of them formulated in the deterministic robust 
control context. Some relevant examples correspond to ll26ll . 

ESI, E3, m, Ea, m, ini, 1221 , ca, where several suc¬ 
cessful solutions differing in nature and architecture have been 
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proposed. While these available robust anti-windup solutions 
arise from different approaches and paradigms to the robust 
anti-windup problem, they mostly share the common feature 
of arising from a deterministic approach wherein a constant 
but unknown parameter belongs to a (known) compact set. 
Then, by suitable relaxations of the assumptions at the price 
of increased conservativeness, these sets are convexihed to 
obtain numerically tractable approaches to the analysis and 
design problem. In this paper we follow a radically different 
paradigm, arising from randomized methods for performance 
analysis and control design. 

Randomized and probabilistic methods for control received 
a growing attention in the systems and control community 
in recent years ESl . These methods deal with the design of 
controllers for systems affected by possibly nonlinear, struc¬ 
tured and unstructured uncertainties. One of the key features 
of these methods is to break the curse of dimensionality, i.e., 
uncertainty is “lifted” and the resulting controller satishes a 
given performance for “almost” all uncertainty realizations. In 
other words, in this framework, we accept a “small” risk of 
performance violation. 

One of the successful methods that have been developed 
in the area of randomized and probabilistic methods is the 
so-called scenario approach, which provides an effective tool 
for solving control problems formulated in terms of robust 
optimization Jb]. In this case, the sample complexity, which is 
the number of random samples that should be drawn according 
to a given probabilistic distribution, is derived a priori, and it 
depends only on the number of design parameters ne, and 
probabilistic parameters called accuracy e and conhdence <5. 

In parallel with these methods, sequential-based approaches 
have been developed, see for instance the recent sequential 
probabilistic validation techniques proposed in ||T] and ref¬ 
erences therein. In particular, in uni an algorithm is pro¬ 
posed which, at each iteration, constructs a candidate con¬ 
troller, whose performance is then validated through a Monte 
Carlo approach. If the controller does not enjoy the required 
probabilistic performance specihcation, a new controller is 
designed based on new sample extractions. At each step of 
the sequence, a reduced-size scenario problem is solved. This 
method is usually effective in practical applications, even if 
its sample complexity cannot be determined a priori. These 
methods may be used in specihc control problems such as 
designing a common quadratic Lyapunov function. In these 
cases, however, the fact that a single common Lyapunov 
function should hold for all possible uncertainties leads to 
an overly conservative design. The same drawback is known 
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in classical robust control, where the design of a common 
quadratic Lyapunov function requires an exponential number 
of computations 11, a. For these reasons, parameterized 
Lyapunov functions have been developed and used in many 
robust control problems subject to uncertainty 13] Chapter 
19.4], 

Within the above surveyed context, the contribution of this 
paper is two-fold. In the first part of the paper (Section |II]l, 
we develop a new framework, denoted as scenario with 
certificates, which is very effective in dealing with parameter- 
dependent Lyapunov functions. This framework continues the 
research originally proposed in ll29l for feasibility problems 
in the context of randomized methods. The main idea in this 
approach is to distinguish between design variables 9 and 
certificates ^ and has the advantage, compared to classical 
robust methods, that no explicit parameterization (linear or 
nonlinear) of the Lyapunov functions is required. In other 
words, the method is based on a “hidden” parameterization 
of the Lyapunov functions, and has the clear advantage to 
reduce the conservatism compared to the methods based on 
the design of common Lyapunov functions. 

In the second part of the paper (Sections Uni and HVll, we 
show the application of the scenario with certificates approach 
to anti-windup design and analysis in the presence of time- 
invariant uncertainty. In particular, we concentrate on a specific 
anti-windup scheme for linear saturated plant-controller feed¬ 
backs: static direct linear anti-windup design (see, e.g., m 
Part II]). Direct linear anti-windup corresponds to augmenting 
a linear saturated control design with a linear gain Daw 
driven by the excess of saturation dz(u) = u — sat(rt) and 
injecting suitable correction “anti-windup” signals at the state 
and output equation of the pre-designed windup-prone linear 
controller. Several different performance optimization tasks 
are considered, and we present different alternatives in the 
subsections of Section |In| A notable one, which is novel to 
the anti-windup field and arises naturally from the proposed 
probabilistic context, is the one (in Section IIII-Bl i where the 
design minimizes an upper bound of the area spanned by the 
nonlinear £2 gain curve, accounting for uncertain (but proba¬ 
bilistically known) energy of the external disturbance acting on 
the saturated closed loop. Each proposed performance metric 
is shown together with a robust performance analysis result 
that is not limited to the anti-windup context but is applicable 
to any uncertain linear closed loop subject to saturation in the 
classical LET form. In all the above contexts, we will show 
that the probabilistic approach allows to reduce conservatism 
as well as to cope with uncertainty entering nonlinearly in 
the problem description, without overbounding it. The latter 
case has instead already been treated in various examples 
in the literature, where the trade-off between the robust and 
deterministic approach is usually referred to as probability 
degradation function, see e.g. Il35l Ex. 11.1 and 12.1]. 

Preliminary results in the direction of this paper were 
presented in ifTbl . ifTSl . In particular, in fl^ the results were 
based on the classical scenario optimization approach. In that 
formulation, both the certificates and the design variables were 
treated as optimization variables over the whole operating 
region, thus leading to a conservative solution, and - some¬ 


times - to infeasibility. The scenario with certificates solution 
proposed here was then introduced in CSl, where we also 
provided preliminary results on the design of anti-windup 
compensators minimizing the nonlinear £2 gain. 

As compared to these preliminary results, in this paper 
we fully exploit the potential of the proposed randomized 
approach towards the design of static anti-windup gains arising 
from suitable performance/robustness trade-offs. More specif¬ 
ically, after analyzing in-depth the formal properties and the 
algorithmic solutions for the novel randomized approach, we 
apply it to the robust design of anti-windup compensators 
within different problem settings; namely, we address the 
minimization of the nonlinear £2 gain, the minimization of the 
area spanned by the nonlinear £2 gain curve, the minimization 
of the reachable set and the maximization of the domain of 
attraction for closed-loop saturated systems. Eor each of the 
above problems, we provide several discussions and a suitable 
simulation example (in Section lIVl l. 

The paper is ended by some concluding remarks. 

Notation 

In the remainder of the paper, the following notation and 
definitions are adopted: 

• the £2 norm of a scalar valued signal x{f), defined for 



• e denotes the Euler number; 

• given a square matrix Z,lle{Z) = Z + 

• given a matrix X, denotes the row of X. 

11. Scenario with certificates 

In this section, we briefly recall the scenario approach in 
dealing with convex optimization problems in the presence 
of uncertainty, and subsequently introduce a novel framework 
that we name scenario with certificates (SwC). 

A. The scenario approach 

The so-called scenario approach (b) has been developed to 
deal with robust convex optimization problems of the form 

0RO = arg miners (RO) 

eee 

s.t. fiO,q) <0, Vg e Q, 

where, for given q within the uncertainty set Q, f{9, q) are 
convex functions of the optimization variable 9 G Q, the 
domain 0 is a convex and compact set in K."® and the 
uncertainty set Q is not necessarily compact. Eurthermore, 
we assume that f{9, q) is a continuous (possibly nonlinear) 
function of q for any given 9. 

Eollowing the probabilistic approach discussed for instance 
in Ea, Q a probabilistic description of the uncertainty is 
considered over Q. That is, we formally assume that q is 
a random variable with given probability distribution with 
support Q. Such a probability distribution may describe the 
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likelihood of each occurrence of the uncertainty or a user- 
defined weight for all possible uncertain situations. Then, N 
independent identically distributed (iid) samples ..., 
are extracted according to the probability distribution of the 
uncertainty over Q. 

These samples are used to construct the following scenario 
optimization (SO) problem, based on N instances (scenarios) 
of the uncertain constraints 

= argminc^0 (SO) 

eee 

s.t. <0, i = 

Problem (ISOl l can be seen as a probabilistic relaxation of prob¬ 
lem (IROl i. since it deals only with a subset of the constraints 
considered in dROli . according to the probability distribution 
of the uncertainty. However, under rather mild assumptions 
on problem dROb , by suitably choosing N, this approximation 
may in practice become negligible in some probabilistic sense. 
Specifically, N can be selected depending on the level of “risk” 
of constraint violation that the user is willing to accept. To this 
end, the violation probability of the design 0 is defined as 

Viol(0) =Pr{geQ : /(0,(z) >0} (1) 

where Pr denotes the probability with respect to the distribu¬ 
tion of the random variable q. Similarly, the reliability of the 
design 6 is given by 

Rel(6») = 1 - Viol(6»). 

Then the following result has been proven in ifTOl . 

Proposition 1. 1 1701? Assume that, for any multisample extrac¬ 
tion, problem d5(9b is feasible and attains a unique optimal 
solution. Then, given an accuracy level e € (0,1), the solution 
Oso of problem (ISOb satisfies 


practical viewpoint, it is always preferable to numerically solve 
the one dimensional problem of finding the smallest integer 
N such that B(7V, e, ng) < J. 

B. Scenario with certificates 

The classical scenario approach previously discussed deals 
with uncertain optimization problems where all variables 9 
are to be designed. On the other hand, in the design with cer¬ 
tificates approach we distinguish between design variables 9 
and certificates In particular, we consider now a function 
f{9,^,q), which is assumed to be jointly convex in 9 € Q 
and ^ G S C for given q G Q (where 0 and S are 
supposed to be non-empty), and construct the following robust 
optimization problem with certificates 

9rwC = arg miners (RwC) 

0 

s.t. 9 e S{q), Vq e Q, 

where the set S{q) is defined as 

S{q) = {6> e 0| 3^ e S satisfying f{9, q) < 0} . (5) 

The key observation that is at the basis of the approach 
developed in this section is that the set S{q) is convex in 9 
for any given q, as formally shown in Theorem 1 below. 

Remark 1. [Common vs. parameter-dependent certificates] As 
discussed in the Introduction, problem (IRwCb corresponds to 
searching for so-called parameter-dependent certificates, in the 
sense that a different certificate is allowed for every instance of 
the uncertainty q, that is ^ = ^{q)- This is very different from 
the approach frequently adopted when dealing with uncertain 
systems, based on the design of common certificates. This 
would result in a robust problem of the form 


Pr {Viol(0so) > e} < B(Ar, e, ng), (2) 

where 

B(iV,e,n,)= (3) 


We note that non-uniqueness of the optimal solution can be 
circumvented by imposing additional “tie-break” rules in the 
problem, see, e.g.. Appendix A of 0. Also, in im it is shown 
that the feasibility assumption can be removed at the expense 
of substituting ng — 1 with ng in B(N,e,ng). 

From Equation 0, explicit bounds on the number of 
samples necessary to guarantee the “goodness” of the solution 
have been derived. The bound provided in [T] shows that, if, 
for given e,SG (0,1), the sample complexity N is chosen to 
satisfy the bound 


N > 


e 

e(e- 1) 


In - + ng — 1 ) m, 


(4) 


then the solution 9so of problem (ISOb satisfies Viol(0so) < e 
with probability 1 — 5. This bound improves by a constant 
factor upon previous bounds, see e.g. El, and it shows that 
problem (SO) exhibits linear dependence in 1/e and ng, and 
logarithmic dependence on 1/5. Note however that, from a 


{^*00,^00} = arg min c'^ 6 » (CO) 

SGe.CGS 

s.t. fi9,^,q) <0, VqG Q, 

where the common certificate ^co should be the same for all 
possible values of q. Clearly, if the spread of the uncertainty 
is large, it is unreasonable to expect the same certificate ^co 
to hold for all q G Q. For instance, in the classical case 
when the certificates correspond to Lyapunov functions for 
proving stability, the difference between the two approaches 
lies on the difference between common Lyapunov functions 
and parameter-dependent ones. In particular, for this problem, 
different solutions have been proposed in the robust control 
literature, which are based on explicit parameterizations (e.g. 
linear or bilinear) of the function ^(q), see for instance E). 
One of the main novelties of the probabilistic approach dis¬ 
cussed in this paper is the fact that no explicit parameterization 
is necessary. o 

In Il29l . an approach to handle parameter-dependent linear 
matrix inequalities (LMIs) has been introduced, and a solution 
for feasibility problems, based on uncertainty randomization 
and on an iterative ellipsoidal algorithm, has been derived. 
The approach considers different certificates for each sampled 
value of the random uncertainty. In the same paper, the 
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conservatism reduction is illustrated by means of a numerical 
example showing that traditional robustness methods based on 
common Lyapunov functions fail. 

In the cutTent work, we follow along this line of research, 
and propose to approximate problem dRwCl l introducing the 
following scenario with certificates problem, based again on 
a multisample extraction 

^SwC = arg min c'^9 (SwC) 

s.t. i = 

Note that, contrary to problem (ISOb . in this case a new certifi¬ 
cate variable is created for every sample i = 1,..., N, 
that is To analyze the properties of the solution 

we note that, in the case of SwC, the reliability and 
violation probabilities of design 6 are given by 

Rel(6») = Pr|q e Q|3^ G S satisfying f{0,^,q) < o|, 

Viol(0) = Prjzlg G G 5 satisfying/(0,^,q) < o|. 

We now state the main result regarding the scenario opti¬ 
mization with certificates. 

Theorem 1. Assume that, for any multisample extraction, 
problem dSwCb is feasible and attains a unique optimal 
solution. Then, given an accuracy level e G (0,1), the solution 
9swC of problem dSwCb satisfies 

Pr {Viol(0swc) > e} < B(iV, e, ne). (6) 

Proof We first prove convexity of the set S{q). To see this, 
consider 0i,02 G S{q). Then, there exist ^ 1,^2 such that 

f{0i,^i,q) < 0 and /(6»2,6,'?) < 0. 

Consider now 9\ = X0i -b (1 — A)02, with A G [0, 1], and let 
= A^i -b (1 — A)^ 2 - From convexity of / with respect to 
both 9 and ^ it immediately follows that 

< A/(6»i,Ci,g) + (1 - A)/(6»2,6,'?) < 0, 

hence 9\ G S{q), which proves convexity. 

Now, observe that the condition 9 G S{q) is equivalent to 
requiring 

= inf f{S,^,q) < 0, 

so that problem dRwCb is equivalent to 

minc^0 (7) 

e 

s-t. /c(6',q) < 0 Vq G Q. 

Note that, from the convexity of S{q), it follows that the 
function f^{9, q) is convex in 9 for given q\ see also @ P- 113]. 
Hence, problem O is a robust convex optimization problem. 
Then, we construct its scenario counterpart 

minc^0, (8) 

0 

s.t. min < 0, i = 1,... ,1V, 

JiGR”« 


where the subscript i for the variables highlights that the 
different minimization problems are independent. Finally, we 
note that ® immediately rewrites as problem dSwCb . □ 

We remark that problem (SwC) has N separate constraints, 
one for each qF)^ and each constraint involves a different 
certificate. However, notice that the dimension of the certifi¬ 
cates ^ does not enter in the right-hand side of the probability 
bound (|6]l in Theorem [T] Hence, the sample complexity of 
problem (SwC) is smaller than that of the scenario counterpart 
of the problem with common certificates (CO), in which both 
9 and ^ play the role of design variables. On the other hand, 
the complexity of solving problem (SwC) is higher, since 
the number of optimization variables significantly increases, 
because a different variable is introduced for every sample 
q^'^\ This increase in complexity is not surprising, being 
problem (RwC) much more difficult than problem (CO). In 
particular, we remark that, in the case when the constraints 
are linear matrix inequalities, then the scenario problem can be 
reformulated as a semidefinite program by combining the N 
LMIs into a single LMI with block-diagonal structure. It is 
known, see a, that the computational cost of this problem 
with respect to the number of diagonal blocks N is of the order 
of The sequential method discussed in the next section 

aims at improving the computational efficiency by reducing 
the number of scenarios. 

C. Sequential randomized algorithm for SwC 

Motivated by the computational burden of the SwC solution, 
in this section, we present a sequential randomized algorithm 
that alleviates the load by solving a series of reduced-size 
problems. The algorithm is a minor modification of uni 
Algorithm 1], which was introduced for the standard scenario 
approach, and it is based on separate design and validation 
steps. The design step requires the solution of the reduced- 
size SwC problem. In the validation step, contrary to ca 
where only functional evaluations are required, the feasibility 
problems (|9]l and (fTOl l need to be solved. However, it should 
be pointed out that the latter problems are of small size, 
and can be solved independently, and hence parallelized. The 
sequential procedure is presented in Algorithm 1, and its 
theoretical properties are stated in the subsequent lemma. Its 
proof follows the same lines of that in M Theorem 1 and 
Algorithm 1], and is omitted for brevity. It should be stressed, 
however, that in HU the sequential approach was not applied 
to SwC, but to standard scenario optimization. 


Sequential Algorithm for SwC 


1) Initialization 

set the iteration counter k = 0. Choose the desired prob¬ 
abilistic levels e, 6 and the desired number of iterations 
kt > I 

2) Update 

set A: = A: -f 1 and > N where N is the smallest 
integer s.t. B{N,e,ng) < <5/2 

3) Design 
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• draw Nk iid (design) samples ..., 

• solve the following reduced-size SwC problem 

ONk = arg min (9) 

s.t. <0, i=l,...,Nk. 

• if the last iteration is reached (fc = kt), 
return 6»sswC = 

4) Validation 

• set Mk according to (fTTT l 

• draw iid (validation) samples ..., 

• for j = 1 to Mk 

- if the validation problem 

find such that 

f{0N„^j,qi^^)<0 (10) 

is unfeasible goto step (O. 

. return ^sswC = • 

Lemma 1. Assume that, for any multisample extraction, 
problem dSI is feasible and attains a unique optimal solution. 
Then, given accuracy level e G (0,1) and confidence level 
5 G (0,1), let 

alnfc + In ('Hkt-iM) + In | 

Mk> - ^ ^ (11) 

where J~°'’ a > 0, is a finite 

hyperharmonic series. Then, the probability that at iteration 
k Algorithm 1 returns a solution 0sSwC with violation greater 
than e is at most 6, i.e., 

Pr{Viol(0SSwc)>e}<(5. (12) 

Remark 2. The dimension of the system that can be handled 
by the algorithm depends not only on uq, but also on the 
desired probabilistic accuracy and confidence. The paper IfTTI 
considers a real-world example of a hard disk drive consisting 
of 153 design parameters and 9 uncertain parameters. It is 
shown that the sequential approach provides results even for 
very tiny values of accuracy and confidence, contrary to the 
one-shot solution, i.e. the one considering all the N constraints 
at once. o 

In the second part of this paper, we introduce the problem of 
robust £2 gain minimization for linear anti-windup systems. 
The SwC approach appears to be well suited for such a 
design problem, for several reasons: i) the nominal design can 
be formulated in terms of linear matrix inequalities, ii) the 
uncertainty set can in principle be of any size and shape, and 
iii) the optimization variables can be easily divided in design 
variables for the anti-windup augmentation and certificates 
for stability and performance guarantees, iv) the number of 
uncertain parameters can in principle be arbitrarily large and 
any functional dependence is allowed. 


III. Anti-windup compensator design 

Consider the linear uncertain continuous-time plant with n„ 
inputs subject to saturation 

Xp — Ap(^q'jXp “t“ Bp .ii{^q^(j -t- Bp .i,;(^q^w 

y ~ ^p,yu {q)o' -f Dp^yyj{(f)w (13) 

z = Cp^z{.q)^p Dp zu(,q)^ Dp z'wiq)'^-) 

where Xp is the plant state, a G M"" is the control input, 
w is an external input (possibly comprising references and 
disturbances), 2 : is the performance output, y is the measured 
output and q denotes random uncertainty within the set Q. 
We denote hy q G Q the nominal value of the uncertain 
parameters. 

As customary with linear anti-windup design llJTl . we 
assume that a linear controller has been designed, based on the 
nominal system, in order to induce suitable nominal closed- 
loop properties when interconnected to plant ( fT3] ) 

“t“ Bc yP -\- Bc zu^tC “t“ V\ (14) 

ti — CqXc “t“ DQ yy -\- “t“ V 2 , 

where Xc is the controller state, w typically comprises refer¬ 
ences (but may also contain disturbances), u is the controller 
output and v = [v^ V 2 Y ™ extra input available for 
anti-windup action. The controller (fT4l) is typically designed 
in such a way that the so-called unconstrained closed-loop 
system given by dni), (dll, cr = u, u = 0 is nominally 
asymptotically stable and satisfies some nominal or robust 
performance requirements. 

Consider now the (physically more reasonable) saturated 
interconnection a = sat(M), where the k*^ entry of a is 
satfe(ufc) = max(min(Mfe,Mfe), —life), denoting the input 
by Uk. When the input saturates, the closed loop system 
composed by the feedback loop between (fTSl l and (fT4ll is no 
longer linear and may exhibit undesirable behavior, usually 
called controller windup. Then, one may wish to use the free 
input V to design a suitable static anti-windup compensator of 
the form 

V = [vi = Daw{u - sat(M)). (15) 

This signal can be injected into the right hand side of the 
controller dynamics (O to recover stability and performance 
of the unconstrained closed-loop system. 

When lumping together the plant-controller-anti-windup 
components (O, (O, o, a = sat(u), one obtains the 
so-called anti-windup closed-loop system, a nonlinear con¬ 
trol system which can be compactly written using the state 
X = [Xp x’^]'^ as in ( fT6b (at the top of the next page), where 
dz denotes the deadzone function, i.e., dz(M) = u—sat(u), and 
all the matrices are uniquely determined by the data in ( [13] ), 
•O, (ITSl l (see, e.g., the full authority anti-windup section in 
IIJTII for explicit expressions of these matrices). 

The compact form in ( [T6b may be used to represent both 
the saturated closed loop before anti-windup compensation, 
by selecting D^w = 0, or the closed loop with anti-windup 
compensation, by performing some nonzero selection of Daw 




X 


-^ci{q)^ ~t“ cl ,v D aw') ciz('u) -\- I3 c 1 ^w(,Q)u) 

Ccl^z{^Q_)^ ~\~ cl^zq(^Q_) ~t“ Dc1^zv{_Q^D aw') dz(7/) “t" Dcl^zw{^Q_)'^ 
Ccl^ui^O')^ i^Dcl^uqi^Q') “t“ ) dz('u) -j- Dcl,uw{^Q_)'^ 


6 


z = 
u = 


Q = >0, U > 0 diagonal, 

Acl{q)Q {Bal,q{q) + Bcl,v{q)Daw)U+ Y'^ Bcl,w{q) 
C'cl^uiq')Q i_Bciwq{q') ~t“ B ai wv i^q') B aw') U U B^iaw^q') 
0 0 - 1/2 
Ccl,z{q')Q i^Bcl^zqi^q') “ 1 “ Bcl,zv(^q')Baw') U Bcl^zwiq') 


He 


0 

0 

0 

- 7 ^ 1/2 


< 0 , 


Q 


^[k] 


\ls^\ 


> 0 , k = 1,... ,n^ 


He 


Aci{q)Q Bci^q{q)U + Bci^y{q)X + Y^ Bd^wiq) 
Ccl,u{q)Q Bai aq{q')U Y Bd avisi)^ U Bd wwiq') 
0 0 - 1/2 


Ccl,z{q)Q Bal,zq{q)U + Bal,zv{q)X 


Bci,zw{q) 


<0 


(16) 

(17a) 

(17b) 

(17c) 

(18) 


A. C 2 gain minimization 

First, we analyze system (fTbl l for the nominal case, that is 
when no uncertainty is present and Q is a singleton coinciding 
with the nominal value q of the parameters. 

In this nominal case, the results in ifT^ . Il24ll . Il23l . If33l and 
references therein generalize the well-known sector conditions 
originating from absolute stability theory, into a so-called 
generalized sector condition, stating that given any matrix H, 
it holds that dz(u)^{7“^(it — dz(M) + Hx) > 0 for all x 
satisfying dz(i7x) = 0. This condition is a powerful tool 
because it enables us to provide a non-global homogeneous 
characterization of the stability and performance properties of 
the nonlinear closed loop ( fTbl l by way of an extension of abso¬ 
lute stability theory. In particular, in ( fTTI i the generalized sector 
condition provides guarantees on the derivative of a quadratic 
Lyapunov function in a suitable (ellipsoidal) sublevel 

set £{{s^Q)~'^) (see (fT9] ) below) contained in the region where 
dz(i7a;) = 0 (this is guaranteed by (I17cl l). Here, parameters 
Q, U and Y = U~^H can be optimized by way of a convex 
semi-definite program. More formally, we recall the following 
stability and performance analysis result from ll2^ Theorem 
2 ]. 


gain of the system is given by 

7 ^(s) = min 7 ^ ( 20 ) 

{Y,Q,Y,U} 

s.t. (ini). 

As suggested in ||2^ . one may use the result of Proposition|2 
to compute an estimate of the nominal nonlinear £2 gain curve 
(see IZTl ). namely a function s M- 7 ( 3 ) such that for each s in 
the feasibility set of (fTTI i and for each w satisfying ||tu ||2 < s, 
the zero initial state solution to (fTbl l satisfies 

Iklb < 7 (s)||w|| 2 - 

To do so, it is possible to sample the nonlinear gain curve 
s 1 -^ 7 ( 5 ) by selecting suitable positive values si < ■ • • < s„ 
and, for each k = 1,... ,n, solving (l 20 l) . after replacing s = 
Sk. Then, the £2 gain curve estimate can be constructed by 
interpolating the points {sk,fk{sk)), k = 1,... ,n. 

Following the derivations in ifT^ (which generalize the 
global results of ll28l l. one may notice that the product BawU 
appears in a linear way in equation ( I17bl ) and, for a fixed value 
of s, the synthesis of a static anti-windup gain minimizing the 
nonlinear £2 gain can be written as a convex optimization 
problem, as stated next. 


Proposition 2 (Regional stability/performance analysis). 
Given a scalar s > 0, consider the nominal system, that is let 
Q = {g}. Assume that the semidefinite programming (SDP) 
problem dni) in the variables 7 ^, Q, Y and U is feasible. 
Then: 

(a) the nonlinear algebraic loop in f l76l ) is well posed, 

(b) the origin is locally exponentially stable for m with 
basin of attraction containing the set 

£{{s^Q)~^) = {x : x^Q~^x < s^}, (19) 

(c) for each w satisfying ||w ||2 < s, the zero initial state 
solution to ( 1761 ) satisfies \\z \\2 < 7 ||u'|| 2 , where the £2 


Proposition 3 (Regional stability/performance synthesis). 
Given the plant-controller pair (Es, m, and a scalar s > 0 , 
consider the nominal system, that is Q = {g} is a singleton. 
Assume that the SDP problem 


7 ^(s) = min 7 ^ 

{Y.QYU.x} 

s.t. (I17al) . P7cl) . ITSl) 


( 21 ) 


is feasible. Then, selecting the static anti-windup gain as 

Baw = XU-\ ( 22 ) 

the anti-windup closed-loop system (ES, El, EH), = 
sat(M) or its equivalent representation in ( 1761 ) satisfies prop¬ 
erties (a)-(c) of Proposition 12] 
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Remark 3. The static linear anti-windup architecture ( fTST i 
adopted in Proposition |3 and in the rest of this paper is 
only one among many possible choices (see, e.g., l37l). In 
particular, when using direct linear anti-windup designs, an 
alternative appealing approach is given by the design of a 
plant-order linear filter (namely, of the same order of the 
plant) generalizing the static selection in ( fTST l. Such a dynamic 
generalization of ( fTSl ) was shown in || 2 T]| to be important 
to guarantee global exponential stability in the presence of 
saturation. However, this fact was later de-emphasized once 
the above mentioned generalized sector condition was intro¬ 
duced (see El, which provides the non-global extension of 
the results in ED). More specifically, non-global guarantees 
of stability in the presence of saturations/deadzones is a 
fundamental tool to establish exponential stability properties 
of the origin for non-asymptotically stable plants that are 
stabilized through a saturated control input. o 

Remark 4. The separation between the Lyapunov certificate 
Q,Y and the optimization variables X,U in dH is only 
possible when adopting the static architecture in (flsT l. which 
makes the robust extensions provided below reasonably sim¬ 
ple. Extensions to the dynamic plant-oder anti-windup case 
is possible only if one adopts certain conservative convex 
relaxations of the nonconvex robust conditions, along similar 
directions to those well surveyed, for example, in ifOl . o 

Consider now the uncertain case, when the system matrices 
in (fThl l defining the dynamics of x and z are continuous (pos¬ 
sibly nonlinear) functions of the uncertainty g G Q, which is 
considered to be time invariant. Then, the interest is in finding 
robust solutions to the analysis and design problems discussed 
before. For instance, in the analysis case, one could search for 
common certificates Q, Y, U in (l20l l such that 7 ^ is minimized 
over (fTTl i for all q G <Q. This approach is pursued in ifT^ . 
where scenario results are used to find probabilistic guaranteed 
estimates. Note that the use of a common Lyapunov function 
is well justified when the uncertainty is, for instance, time- 
varying. However, as discussed in Section III-CI an approach 
based on common certificates is in general very conservative in 
the case of time-invariant uncertainty, and one would be more 
interested in finding parameter-dependent certificates. To do 
this, we would need to solve the following robust optimization 
problem with certificates 

7 ^(s) =min 7 ^ (23) 

s.t. 7 ^ G { 7^1 3{Q, Y,U} satisfying (fTTI i} Vg G Q. 

A similar rationale can be applied to robustify the anti-windup 
synthesis problem of Proposition |3] As a matter of fact, when 
the system matrices are uncertain, one meets similar obstruc¬ 
tions to those highlighted as far as analysis was concerned. 
Again, instead of looking for common Lyapunov certificates 
as in ESI, we write the following RwC problem 

7 ^(s)=min 7 ^ (24) 

s.t. { 7 ^C/,X} G {{ 7 ^C/, 2 f} I 3{Q,Y} satisfying 
(II7il),(II7g),(IIHl)} VqGQ. 


Note that both problems (|23ll and (|2l are difficult non¬ 
convex semi-infinite optimization problems, due to the fact 
that one has to determine the certificates as functions of the 
uncertain parameter q. A classical approach in this case is 
to assume a specific dependence (generally affine) of the 
certificates on the uncertainty. Instead, in this paper we adopt 
a probabilistic approach, assuming that <7 is a random variable 
with given probability distribution over Q, and apply the SwC 
approach discussed in Section III-CI This allows us to find an 
implicit dependence on q of the certificates. This is in the 
spirit of the original idea proposed in 1291 . The following 
two theorems, whose proofs come straightforwardly from 
Propositions [D and in exploit the SwC approach to address the 
robust nonlinear C 2 gain estimation and synthesis for saturated 
systems. 

In particular, our first anti-windup theorem provides a con¬ 
vex optimization procedure to obtain probabilistic information 
about the worst case nonlinear C 2 gain. To this end, we fix 
an upper bound s for ||w ||2 and define two scalars e and S in 
( 0 , 1 ) denoting, respectively, an acceptable level of probability 
of constraint violation and a level of confidence. Then, inspired 
by (l20l l. we apply Theorem [D with the design variables 9 
and the certificates ^ given, respectively, by 0 = 7 ^ and 
^ = {Q, U,Y} and the number N of samples selected, based 
on bound (| 6 ]l, to satisfy 

B{N,e,ns)<S. (26) 

Then the following result is a straightforward consequence of 
Theorem [D and Proposition |2] 

Theorem 2 (Probabilistic performance analysis). Given 
scalars s > 0, and e, 5 G (0,1), select N satisfying ( 1261 ). 
fix 0 = 7 ^ and ^ = {Q, U, Y }. 

If the scenario approximation liSwCi of problem (1231) is 
feasible and attains a unique optimal solution, then for each 
||r /;||2 < s, the zero initial state solution of system EH) satisfies 

Prdkils > 7(s) Ikll2) < C 

with level of confidence no smaller than 1 — <5. 

Our second anti-windup theorem allows for robust random¬ 
ized synthesis using the SwC approach and follows parallel 
steps to those of Theorem |2] by combining Theorem [D with 
Proposition |3 To this end, and following (l2Tli . we choose 
the design variables 6 and the certificates ^ as follows: 
9 — {7^,26,17} and ^ = {Q,Y}. Indeed, the variables 9 
must include the quantities X and U used to determine the 
anti-windup gain in (l 22 ll : these variables must be the same over 
all sample extractions so that a unique anti-windup gain can be 
determined. Then the following holds combining Theorem [D 
with Proposition 13 

Theorem 3 (Probabilistic anti-windup synthesis). Given 
scalars s > 0, and e, 6 G (0,1), select N satisfying ( 1261 ). 
fix 9 = { 7 ^, X, [/} and ^ = {Q, Y }. 

If the scenario approximation liSwCi of problem (1241) is 
feasible and attains a unique optimal solution, then for each 












7^(s) 


min 7 ^ 


s.t. Qi = Qf >0, U > 0 diagonal, 

„ Cci.„(gW)g. + 

0 0 


Cci,M^)Q^ 

Qi 

Xi,[k] ul/s^. 


Dci,.q{q^XU + Da^,,{q^XX 
> 0, fc = 1,... ,n„, i = 1,.. .,N 


Dci,uw{q’'’‘^) 

-112 


0 ■ 

0 

0 

2 


<0 


(25) 


IIWII 2 < s, the zero initial state solution of the uncertain 
system (m with anti-windup static compensator ( 1221 ) satisfies 

Pr(||z ||2 > 7(s) |k|| 2 ) < e, 
with level of confidence no smaller than 1 — <5. 


Then we may compute an upper bound on the area spanned 
by the C 2 gain as follows 


ps PS ”7 

/ X{s) ds < / ds = 

■’s. X k=0 


k=0 


Tfe- 




fc +1 


For completeness, in (l25T l we report the SwC problem based 
on the application of Theorem [3 Similarly, the SwC problem 
based on the application of Theorem |2] can be constructed 
following the same rationale and it is not reported here due to 
space limitations. 


This leads to the following RwC problem 


min y 
r,u,x 

k=0 


-fc+i _ gfe+i 


k 1 


s.t. {s,r, C/,X} e S{q,s), Vq G Q,Vs G [s, s], 


(28) 


Remark 5. The reformulation of the SwC approach for 
nonlinear gain analysis and anti-windup synthesis in Theo¬ 
rems |2] and [3] is appealing from an engineering viewpoint. 
As a matter of fact, since the N instances of the system 
matrices are extracted according to the probability distribution 
of the uncertainty, this solution provides a view of what 
may happen in most of practical situations. Moreover, we 
stress that the proposed formulation does not constrain the 
unknown Lyapunov matrices Qfs to be the same for all the 
sampled perturbations. Instead, it allows them to vary among 
different samples. This is possible because the Qfs (as well 
as the Yfs) are only instrumental for the computation of the 
robust compensator. Note that, unlike system matrices, e.g., the 
Ac;((?*'®^)’s, which are uncertain by definition, the certificates 
are unknown but they are not random variables. o 

B. Uncertain disturbance energy 

The previous approach can be further modified by observ¬ 
ing that the design is valid only for a given value of s, 
correspondnig to an upper bound on the disturbance energy 
||i (;||2 (see the guarantees in Theorems |2] and (3). However, 
randomization makes it possible to change the perspective 
of anti-windup augmentation, by considering also s as an 
uncertain variable, to take into account the knowledge of a 
certain known probability distribution of the energy of the 
disturbances acting on the system. 

When considering an uncertain disturbance energy, rather 
than minimizing the £2 gain at a specific value of s, we may 
consider to minimize the curve over a compact range [s, s] of 
values of s, possibly being relevant for the specific distribution. 

To this end, we represent the £2 gain curve estimate by a 
polynomial curve over the considered interval, that is, 

n-y 

7 ^(s) = sG[s,s]. (27) 

k=0 


where we used F = [Fq, ..., F„^]^ and, according to 
parametrization (l27l l. 

S{q, s) := {{F, U,X} \ 3{(5, F} satisfying (|17 q|) . (|17cl) . dH]) 

n-y 

with X replaced by ^ F^s^}. 

fc =0 

Notice that the above design problem is still a convex 
optimization problem, with the only difference that the cost 
function is not a single value of 7 (for a nominal s), but a 
set of values of 7 ’s. Namely, we want to minimize the area 
underlying the £2 curve parameterized as a polynomial curve. 
The problem constraints can still be formulated as LMFs. 

The following result is a straightforward generalization of 
the construction in Theorem |3 for this new optimization goal. 

Theorem 4 (Probabilistic synthesis with uncertain energy). 
Given scalars e, 6 G (0,1), select N satisfying ( 1261 ). fix 0 = 
{T,X,U} andi = {Q,Y}. 

If the scenario approximation ASwCil of problem (128b is 
feasible and attains a unique optimal solution, then the zero 
initial state solution of the uncertain system (O with static 
anti-windup compensator (122b satisfies 

Pr(lkll2 > 7(s) Ikll2) < L 

with level of confidence no smaller than 1 — 5, where 7 ( 5 ) = 

s/X{s), and 7 ^(s) defined in (123- 

Remark 6. Notice that, when also the input is uncertain, an 
additional tuning knob appears, namely which character¬ 
izes the trade-off between computational load and conserva¬ 
tiveness. On the one hand, more additional parameters mean a 
more difficult optimization problem. On the other hand, if the 
£2 gain curve is well approximated by the selected polynomial 
expansion, the upper bound is tight. From practical experience 
El, the gain curves are typically sigmoidal or exponential 
functions. Then small values of n.y are already enough to 
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obtain good results (usually, from 3 to 6 ). Notice that other 
basis functions whose integral is linearly parameterized can 
be suitably selected, without any conceptual change. o 

C. Optimized domain of attraction and reachable set 

Similar derivations to the ones of the previous sections can 
be obtained by focusing on different performance goals, as 
well characterized in IH (see also ll24l '). In particular, two 
performance goals which have been well characterized within 
the context of the use of generalized sectors for saturated 
systems correspond to: i) maximizing the size of a quadratic 
estimate of the domain of attraction of the origin in the 
absence of disturbances (that is, w = 0 ), ii) minimizing 
the best quadratic estimate of the reachable set from zero 
initial conditions and in the presence of a bounded disturbance 
||u;||2 < s. 

The goal of this section is then to briefly overview the 
possible extensions of the results in Theorems [2 and |4] to 
these two cases. The following two propositions establish the 
baseline results, proven in ifT^ . Il24l for the nominal case. 

Proposition 4 (Domain of attraction). Given the plant- 
controller pair (O, (EH and a matrix Q = > 0, consider 

the nominal system, that is Q = {g} is a singleton. Assume 
that the SDP problem 

max logdet((5) (31) 

{q,Q,y,u,x} 

s.t. (|2^ . Vg € Q, 

is feasible. Then, selecting the static anti-windup gain as in 
( 122 b . the nonlinear algebraic loop in ( libb is well posed and 
for any initial condition x( 0 ) in the set 

£{Q~^) := {x : x^Q~^x < 1}, (32) 

the (unique) solution x to the anti-windup closed loop with 
w = 0 satisfies lim |a:(f)| = 0 . 

t—¥00 

Proposition 5 (Reachable set). Given the plant-controller pair 
(123, and a scalar s > 0, consider the nominal system, 
that is Q = {g} is a singleton. Assume that the SDP problem 

min trace(O) (33) 

{Q,Y,U,X} 

s.t. dSni), Vg e Q, 

is feasible. Then, selecting the static anti-windup gain as in 
( 122 b . the nonlinear algebraic loop in ( 1761) is well posed and 
any solution from a:( 0 ) = 0 with ||tu ||2 < s satisfies 

x{t) € £{Q~^) = {x : x^Q~^x < 1}, Vf > 0. 

In light of the results summarized above, we can formulate 
robust optimal design and analysis exploiting the constraints 
(l29b and (1^ . respectively, and leading to randomized analysis 
and synthesis tools. These are stated below in two theorems 
whose formulations parallel the one of Theorem |3] Analysis 
results can also be easily stated, paralleling the formulation in 
Theorem|2] but are omitted due to their straightforward nature, 
and to avoid overloading the exposition. 


Theorem 5 (Robust domain of attraction). Given scalars 
e, S € (0,1), select N satisfying ( l26l) . fix 9 = 
and ^ = {Q, Y}. 

If for a selection of Q = > 0 and a scalar a > 0 the 

scenario approximation ( l5wCb of problem (131b is feasible and 
attains a unique optimal solution, then for any initial condition 
in the set 02 b . any solution x of the uncertain system (ESI) with 
anti-windup static compensator ( 122 b and with w = 0 satisfies 
for all t > 0, 

a:(0) e £{Q~^) => Pr f lim |x(f)| = o') > 1 — e, 

\t—^oo J 

with level of confidence no smaller than 1 — <5. 

In Theorem |5] we characterize properties of the scenario 
approximation (ISwCb of problem (OTb with the certificates 
f = {Q,Y}. Then, according to the definition in (|5]l, it 
becomes clear that constraints (l29b are imposed with certifi¬ 
cates {Q,Y} depending on the uncertainty g, which lead to 
reduced conservativeness. An interesting feature arising from 
these g-dependent certificates in ( |29] | is that the rightmost 
constraint in ( I29ab implies that Q is a uniform lower bound 
on all certificates Qi. Stated otherwise, this implies that 
£iQ~^) C £{Q~^), i = l,...,N, namely set £{Q~^) 
is a subset of all the stability regions £(Q~^) obtained for 
each one of the extracted samples g^. Then, differently from 
classical deterministic approaches, although the set £{Q~^) 
is a guaranteed region of robust stability, it is not necessarily 
a forward invariant set (whereas for each qi we know that 
£(Q~^) is a forward invariant set). 

A similar (but somewhat converse) comment applies to the 
robust reachable set studied in the theorem below, wherein the 
rightmost inequality in (I30ab implies that for each g^ we have 
£{s^Q~^) C £{Q~^), i = 1,... ,N, namely set £{Q~^) is 
a superset of all the reachable set estimates £(s^Q~^) obtained 
from the scenario approximation of (l32 l. 

Theorem 6 (Robust reachable set). Given scalars s > 0, and 
e, S € (0,1), select N satisfying ( 126b . fix 9 = {(j, A", [/} and 

e = {o,n 

If the scenario approximation ( l5wCb of problem (133b is 
feasible and attains a unique optimal solution, then for each 
||t /;||2 < s, the zero initial state solution of the uncertain 
system ESli with anti-windup static compensator ( 122 b satisfies 

Pr (^x(t) ^ £{Q~^)) < e 

for all t > 0, with level of confidence no smaller than 1 — 5. 

Remark 7. Notice that Theorem | 6 ] proposes a selection of 
the anti-windup gain that minimizes a suitable measure of the 
size of the reachable set for a specific selection of the bound 
s on the £2 norm of the disturbance w. It is then possible to 
follow similar derivations to those given in Section IlII-BI with 
the goal of providing a suitably weighted optimal selection 
of the anti-windup gain performed by focusing on the size 
of the reachable set in the presence of an unknown £2 
norm of the disturbance, for which probabilistic information is 
available. Then one may quantify the “size” of the reachable 
set for each value of s by a suitable parametrization similar 
to the right hand side of (l27b . and Anally minimize some net 
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Q = Q >0, t7>0 diagonal, Q < Q, 

Aci{q)Q Bci,q{q) + Bci,v{q)X 

Cci,u{q)Q - Y Dci,uq{q)U + Dci,uv{q)X - C/ 


He 


< 0 , 




Q 


> 0 , fc = 1 ,..., riu 


(29a) 

(29b) 

(29c) 


Q = >0, U > 0 diagonal, s^Q > Q, 

Aci{q)Q Bci,q{q) + Bci,v{q)X 

He I Cci,u{q)Q - Y Dci,uqiq)U + Dci,uv{q)X 

0 0 


4/ 

Yk] 


Q 


>0, k = 1,... ,n^ 


U 


BqI^w (q) 
Bcl^UW (9) 
-J/2 , 


< 0 , 


(30a) 

(30b) 

(30c) 


performance metric taking into account the whole range of 
possible occurrences of the £2 norm s of the disturbance w. 
Since this extension is straightforward, it is not discussed in 
greater detail. o 

IV. Simulation examples 

The following numerical results are obtained using Matlab 
R2015a on a 64 bit Windows 8.1 computer equipped with 
an Intel(R) Core(TM) i7-4500U at 1.80 GHz and 8 GB of 
memory. The optimization is implemented using Yalmip ll25l 
and Sedumi ||32l. 


name 

value 

units 

Ri 

313 

ft 

R 2 

20 

n 

R 3 

315 

n 

R 4 

17 

n 

Rs 

10 

n 

Cl 

0.01 

F 

C 2 

0.01 

F 

C 3 

0.01 

F 


TABLE I 

Nominal parameter values eor the network in Fig.IH 


with 


A. £2 ga/n minimization 

In this section, we show the effectiveness of the proposed 
approach, by designing an anti-windup compensator for the 
passive electrical network in Fig. [T] The circuit is a bench¬ 
mark example in the anti-windup literature and was already 
employed in ifJTl to show the potential of static anti-windup 
in a deterministic context. 



Tji = Gii?! -f C1R2 + C2R3 C2R4: “b C3R3, (35) 

772 = C1C2R1R3 -f C1C2R1R4 + C1C2R2R3 
-b C1C2R2R4 + C1C3R1R5 + C1C3R2R5 
+ C2C3R3R5 + C2C3R4R5, (36) 

t]3 = C1C2C3R1R3R3 + CiC2C3i?ii?4i?5 

-b C1C2C3R2R3R5 + (7iC'2C'3i?2i?4i?5. (37) 

Notice that the dependence of rji, i = 1,2,3 upon the physical 
parameters is highly nonlinear. 

The nominal plant can then be put in the form ( fT3] ) via 
suitable state-space realization, where 





r -10.6 

-6.09 

-0.9 

1 

0 -| 

Ap 

Bp,u 

Rp,w 


1 

0 

0 

0 

0 

Cp,z 

Dp^ZU 

Dp,ZW 

= 

0 

1 

0 

0 

0 

^p,y 

Dv.vu 

Dp.yw 


-1 

-11 

-30 

0 

0 





L 1 

11 

30 

0 

0 J 


The dynamics of the network is determined by 5 resistors 
and 3 capacitors, whose nominal values are reported in Table U 
The gain k is instead selected such that the transfer function 
between Vi and Vo is monic. 

After some cumbersome computations, the transfer function 
of the network turns out to be 

q 2 _ i _ OiR 24 -C 2 R 4 


and w represents the reference value for the output voltage I 4 , 
so that z = w — y is the tracking error. 

The controller is a PID and it is designed based on the 
nominal model, such that the nominal phase margin is 89.5 
degrees and the nominal gain margin is infinity. In the form 
(O, the controller is expressed by the matrices 


G{s) = 


Cl C 2 R 2 R 4 


•5 + 


m, 


Z2i 

m 


1 



Bc,y 

Bc,W 

C 1 C 2 R 2 Ra 
. , 1 

(34) 

[ Co 

Dc,y 

Dc,W 


-80 

0 

1 

-1 

1 

0 

0 

0 

20.25 

1600 

80 

-80 
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Assume now that the input Vi is saturated between the 
minimum and the maximum voltages ±1. For a specific 
value of s, a static anti-windup compensator based on the 
nominal model can be designed to minimize the nonlinear 
gain between the reference and the tracking error, by solving 
the optimization problem (l2lT i and relying on Proposition [2 
Using s = 0.003, the nominal optimal value 7 ^(s) = 2.31 is 
obtained, together with the optimal nominal anti-windup gain 
= [-0.0855,0.0011,0.9887]^. This value corresponds 
to the squared value of the dashed blue curve in Fig. |2] at the 
abscissa s = 0.003 « 10“^-®^. 

Under the hypothesis that the parameters are Gaussian dis¬ 
tributed with mean values as in Table I and standard deviation 
of 10%, a robust randomized compensator can be computed 
following Theorem[2 First notice that ng = 5 = 1-I-3-I-1 (aris¬ 
ing from 7 ^, X and U, respectively). Then, fixing parameters 
e = 0.01 and 6 = 10“®, we see that N = 2819 samples are 
necessary to satisfy (S). Therefore, we follow the sequential 
algorithm of Section ITl-CI to reduce the computational burden. 
In particular, using the same value s = 0.003 as in the nominal 
synthesis above, we apply the Sequential algorithm for SwC, 
initialized with kt — 10. Such a procedure terminates after 
3 iterations, using only N = 846 samples, and providing 
the robust optimal value 7 ^ = 9.1 (evidently larger than 
the nominal one), together with the optimal robust anti¬ 
windup gain = [-2.1493,0.0266,0.6407]^. This value 
approximately corresponds to the squared value of the solid 
red curve in Fig. |2] at the abscissa s = 0.003 w 10“^'®^. 
We observe a slight difference between the two values (in 
the figure, the gain is higher), justified by the fact that the 
performance analysis is carried out with a different set of 
samples. We should remark that in terms of computational 
time, the SwC approach is more demanding than the nominal 
design. In this example, the elapsed time for compensator 
design is approximately 7 seconds in the latter case and about 
5 hours in the former. 



2 2.5 3 3.5 4 4.5 5 5.5 

s x10'® 

Fig. 2. C2 gain estimates for the nonlinear closed-loop systems with and 
without anti-windup compensator. Both robust (solid) and nominal (dashed) 
analysis are considered to assess the performance of robust (blue, 
and nominal (red, i?^™) compensators with respect to the system without 
anti-windup augmentation (black). 


Once the nominal and the robust anti-windup gains are 
fixed, we may characterize their nominal and robust perfor¬ 
mance by applying, respectively, the analysis tools of Propo¬ 
sition |2] and Theorem |2] For comparison purposes, we study 
the nominal and robust performance also for the case with 
no anti-windup compensation. Comprehensively, we obtain six 
curves, all reported in Fig. |2] where the nominal curves are 
dashed and the robust ones are solid. 

As expected, we observe that the robust compensator out¬ 
performs the one designed for the nominal system, as far as the 
robust £2 gain is concerned (solid curves). Conversely, when 
the performance is evaluated on the nominal system (dashed 
curves), the robust compensator yields worse results, since it 
is more conservative. From the analysis point of view, notice 
also that the £2 gains estimated using the robust probabilistic 
method are larger than the ones given by the nominal analysis. 
This holds for any configuration of the saturated closed-loop 
system (without anti-windup, with nominal compensator and 
with robust compensator). 

The time-domain performance degradation of the nominal 
closed-loop system using the robust compensator in place 
of the nominal one can be assessed by looking at the time 
responses illustrated in Fig. |2 From the figure, we conclude 
that, although in any case the use of a compensator (red 
solid and blue dash-dotted curves) improves upon the response 
without anti-windup (black dotted) in terms of tracking error 
and overshoot, we have to accept worse behavior in nominal 
conditions when using robust anti-windup (indeed, the blue 
dash-dotted response yields faster transients than the red solid 
curves). However, this choice is rewarding when acting on a 



Fig. 3. Time responses of the closed-loop system with nominal parameters 
and different configurations of the anti-windup architecture: unconstrained 
system (dashed), saturated system without anti-windup compensator (dotted), 
saturated system with nominal anti-windup (dash-dotted) and saturated 

system with robust anti-windup i^av?^ (solid). 

system subject to uncertainty. Specifically, in Fig. @1 we show 
that the response with the perturbed plant using robust anti¬ 
windup is less sensitive to parameter uncertainties as compared 
to nominal anti-windup. As an example, the figure shows the 
time responses corresponding to 16 different combinations of 
± 10 % perturbations of the nominal parameters. 
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Fig. 4. Sixteen perturbed time responses of the uncertain closed-loop 
system with different configurations of the anti-windup architecture: uncon¬ 
strained system (upper-left), saturated system without anti-windup compen¬ 
sator (upper-right), saturated system with nominal anti-windup T>aw™ (lower 
left) and saturated system with robust anti-windup (lower right). 

It should be here remarked that, if the approach in an 
is employed, Ihe opiimization problem for Ihe design of Ihe 
anii-windup compensator becomes infeasible. This is due to 
Ihe conservaliveness of Ihe formulalion in ifTbl . which requires 
a single Lyapunov funclion for all Ihe possible uncertain 
inslances of Ihe system. 

B. Uncertain disturbance energy 

We use Ihe example of Ihe previous section to illuslrale 
Ihe synihesis of Section IIII-BI aimed to (probabilistically) 
minimizing Ihe area spanned by Ihe nonlinear £2 gain curve 
wilhin a given interval. Specifically, we consider Ihe case 
where Ihe system parameters are fixed, bul s is unknown 
and has a uniform dislribulion belween s = 0.003 and 
s = 0.01. To Ihis end, we use a cubic upper bound for 
Ihe curve (namely, we fix n-y = 3 in (l28l l). Notice lhal now 
no = 8 , because 7 ^ is no longer needed, bul Ihe parameters 
Tfc, k = 0,..., 3 in dZTl l have to be designed. In Ihis way, 
Ihe scenario bound (|4|i raises up to TV = 3293. However, Ihe 
sequential algorilhm of Section III-CI wilh kt = 10 allows 
us to find Ihe desired solution wilh “only” 2306 samples. 
The corresponding anii-windup compensator reads = 

[-0.0003554, 0.0000021,0.9987978]'^. The nonlinear £2 gain 
of the closed-loop system with such a compensator corre¬ 
sponds to the red curve represented in Fig. |5] To better assess 
the performance with this anti-windup gain, we also show 
the nonlinear £2 gain curves obtained from the determinis¬ 
tic design of Proposition [3] corresponding to the minimum 
s = s — 0.003 (blue curve) and the maximum s — 0.01 
(green curve). The corresponding compensators are, respec¬ 
tively, = [-0.022124,0.000276,0.999904]'^ and 

^jnom.max ^ [-0.073639,0.000920,0.999999]'^. In the lower 
subplot of Fig. |5] the same nonlinear gains are normalized in 
terms of percentage of the red curve. 

Fig.E] shows that the minimization of the area underlying 


Fig. 5. Randomized minimization of the C .2 gain considering s = 0.003 
(blue solid, and s = 0.01 (green solid, against 

randomized minimization of the area underlying the curve (red solid, 

the curve may be a good trade-off. Indeed, while at s the 
blue curve provides a smaller gain, that blue curve blows 
up to infinity even before reaching s = s, thereby providing 
an optimal behavior at s and not even guaranteeing stability 
at s. Similarly, the green curve provides desirable optimal 
performance at s but sacrifices the performance at s. The 
red curve clearly shows a trade-off that somewhat sits in the 
middle between the two extreme green and blue solutions. 
Such a result is obtained at the price of some additional 
computational cost, in that more free parameters are involved 
(recall the parameterization of the curve in dZTll). The elapsed 
time for designing such a compensator is then about 6 hours 
(with an increase of 20% with respect to the SwC design of 
the previous section). 

C. Reachable set and domain of attraction 

In this section, we illustrate the effectiveness of the proposed 
randomized anti-windup design approach when the control 
objective is the minimization of the reachable set or the 
maximization of the domain of attraction (see Section IIII-CI) . 
To this aim, a simple example with a planar closed loop is 
considered to easily visualize the obtained sets in proper phase 
planes. 

Consider the first-order plant 
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where a and b are stochastic variables with Gaussian distribu¬ 
tion. Specifically, let E[a] = —1, E]6] = 1 and their standard 
deviation be of 20%. 

The integral controller with unitary gain 
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is employed, so that the stability of the nominal unconstrained 
closed-loop system is guaranteed. Suppose now that the input 
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Fig. 6. Reachable sets for the closed-loop system with 50 different uncertainty samples (blue lines) and estimates of the reachable set given by the deterministic 
design (black line, left, and SwC design (black line, right, 



Fig. 7. Domain of attraction for the closed-loop system with 50 different uncertainty samples (blue lines) and estimates of the domains given by the 
deterministic design (black line, left, 77“^™) and SwC design (black line, right, 


u is bounded below and above by m = —1 and u = 1, respec¬ 
tively. For both the following probabilistic design procedures, 
we set e = 0.01 and 5 = 10“®. Since ng = 6, the resulting 
scenario bound, according to (|4|l, turns out to be = 2977. 
The sequential algorithm of Section Hl-CI is run with kt = 10. 

A robust anti-windup compensator minimizing the reachable 
set can be designed according to Theorem |6] The resulting 
anti-windup compensator is = [—0.0212,0.9902]^ and 

is obtained with N = 596 samples instead of = 2977, 
thanks to the sequential algorithm. Fig. |6(b)| shows that the 
reachable set obtained with such an approach (black thick 
line) can be considered as an upper bound for the reachable 
sets of the uncertain closed-loop system with 50 random 
samples of the uncertain parameters (blue thin lines). It should 
be remarked that, being the samples drawn independently 
from the samples used for design, one reachable set actually 


crosses the black line (the robust design gives only probabilis¬ 
tic certificates). A different conclusion can be drawn when 
the compensator is designed based on the nominal model 
only, according to Proposition |5] as illustrated in Fig. |6(a)| 
In this case, the anti-windup compensator reads = 

[—0.00001,0.99998]^, which evidently does not guarantee 
that the reachable sets achievable with different uncertainty 
samples (blue thin lines) are included in the estimated set 
(black thick line). Notice that the samples used to plot the 
50 instances of the uncertain system in Fig. |6(a)| and Fig. |6(b)| 
are the same. 

The same comparison, with analogous conclusions, can 
be made when the goal of the anti-windup design is the 
maximization of the domain of attraction. In particular. 
Proposition |4] and Theorem |5] yield, respectively, 7?"™ = 
[-2.3475,-1.0063]^ and = [-3.2036,-0.9998]'^, 
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using N = 1191 samples with the sequential algorithm. 

Fig. |7(a)| clearly shows - also in this case - the limits 
of the deterministic approach, which takes into account only 
the nominal values of the system parameters, thus leading to 
an unreliable estimate of the minimum domain of attraction 
(black thick line), crossed by many of the uncertain domain 
samples (blue thin lines). Conversely, in Fig. |7(b)| the random¬ 
ized compensator guarantees that most (in probability) of the 
uncertain domains (blue thin lines) contain the estimate of the 
domain of attraction obtained using the randomized approach 
(black solid line). 

For such a simple example, the elapsed time to compute the 
robust compensator (for both the domain of attraction and the 
reachable set) is smaller than in the electrical network example 
and is about 53 minutes. This is still significant if compared to 
the amount of time required for the simple compensator, which 
is approximately 5 seconds, but on the other hand, such a 
tuning provides robustness guarantees otherwise unobtainable 
with a classical deterministic approach. Moreover, it should be 
recalled here that the design time has no effect of the on-line 
computational time for the anti-windup compensation, since 
the robust compensator is characterized by the same structure 
of the nominal one. 

V. Conclusions 

In this paper we proposed a novel paradigm for approaching 
static linear anti-windup design for linear saturated control sys¬ 
tems in the presence of nonlinear probabilistic uncertainties. 
The proposed paradigm relies on randomized approaches and 
provides a successful tool to tackle this challenging robust 
analysis and design problem. The peculiar structure of static 
linear anti-windup design is particularly suited as a promising 
extension of the typical scenario approach to randomized de¬ 
sign. In particular, since the design variable is decoupled from 
the Lyapunov certificate, we introduce a so-called “scenario 
with certificates” paradigm to provide a dramatically reduced 
conservatism, as compared to typical approaches, based on 
common quadratic certificates. The randomized approach to 
anti-windup design may be formulated using a wide range of 
optimality goals that we study in this paper and for which we 
illustrate the advantages by way of numerical results. 
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